743636 - Hang (eventual crash) with many nested <svg> and <use> elements

Status: RESOLVED DUPLICATE of bug 1531333

(Core :: SVG, defect)

Description

[sachin shinde]

Attachment: svg apphang/crash dos

firefox version 11 hangs when trying to open attached file.It also crashes after some time. 

tested on -- 

Linux shadowfax 2.6.38-13-generic #57-Ubuntu SMP Mon Mar 5 18:10:14 UTC 2012 i686 i686 i386 GNU/Linux

"Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:11.0) Gecko/20100101 Firefox/11.0"

Comment 1

[Daniel Holbert [:dholbert]]

The testcase is basically ~500 nested <svg> elements (with some other elements mixed in).

I suspect we're hosed regardless on that sort of content.

In a debug build, we continuously spam this output:
WARNING: NS_ENSURE_SUCCESS(rv, rv) failed with result 0x80004005: file ../../../mozilla/layout/base/nsCSSFrameConstructor.cpp, line 3920

From a ~10 second sysprof sample of the hang: we're spending 99% of our time in nsCSSFrameConstructor::ProcessChildren, with 96% of the time spent in nsCSSRuleProcessor::RulesMatching (a few stacklevels down from ProcessChildren)

Comment 2

[Daniel Holbert [:dholbert]]

(also: in my opt build, this testcase got us up to 50% memory usage (4 GB) within a few minutes. I killed it at that point to be sure my system wouldn't become unresponsive.)

Comment 4

[violet.bugreport]

Attachment: simplified-testcase.html